Communication control apparatus, firewall apparatus, and data communication method

摘要

A communication control system 1 according to the present invention is provided with a home agent apparatus 10, a plurality of firewall devices 20-40, and a mobile station 50. When the mobile station 50 is connected, for example, to the firewall device 20, the firewall device 20 receives identification information and a configuration file of the mobile station 50 from the home agent apparatus 10 and constructs a firewall for the mobile station 50, using the configuration file. When the firewall device 20 receives an IP packet, it selects a firewall suitable for the mobile station 50 being a destination of the packet and determines the propriety of passage thereof according to a filtering condition set in this firewall.

主权项

1. A communication control apparatus for implementing transmission and reception of data to and from a plurality of firewall devices connectible to a mobile station, the communication control apparatus comprising:
a memory configured to store firewall configuration information suitable for the mobile station, in correspondence with identification information of the mobile station; circuitry configured to detect a first firewall device of the plurality of firewall devices connected to the mobile station, wherein the communication control apparatus, the mobile station, and each of the plurality of firewall devices are separate and distinct stand-alone devices, and the circuitry is configured to receive a binding update packet from the mobile station, the binding update packet indicating that the mobile station has moved and is now connected to a second firewall device; and a communication interface configured to transmit, in response to the detection of the second firewall device connected to the mobile station, a request for forwarding the firewall configuration information corresponding to the identification information of the mobile station to the first firewall device to which the mobile station was previously connected, wherein the request for forwarding the firewall configuration information includes information requesting that the first firewall device forward the firewall configuration information to the communication control apparatus or information requesting that the first firewall device forward the firewall configuration information to the second firewall device.